$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: U3f7rsgz++jf0860+165U+VSKxXS3x4xI/kX5Qb6a98= Subject key identifier: 87:1F:88:0C:83:E6:E0:B8:E0:F5:41:DD:09:E1:70:63:FC:6D:4E:2F Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: D5C6F5CED59F5B62A59E889285DFCF8D39FFFD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: 86 Signing time: Fri 17 Apr 2026 09:44:42 +0000 Manifest this update: Fri 17 Apr 2026 09:39:42 +0000 Manifest next update: Sat 18 Apr 2026 10:12:42 +0000 Files and hashes: 1: 3130332e3133392e39322e302f32332d3234203d3e20313534333231.roa (hash: MYZCf4PNOWzqElmrRXg430VY4rTe8Gvz2xJ1eEg6fPM=) 2: 3130332e3139372e3138302e302f32322d3234203d3e20313534333231.roa (hash: /sYnbyNE8n5tD7rL8BZspwNAMdcCPAdNW+N/JljypYg=) 3: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: fSRUMJiNoZxkMO9SQrY2or9X2jp+S6abR4NBK5DVnSk=) 4: 3130332e3231382e39322e302f32322d3234203d3e20313534333231.roa (hash: 433AW0+hhEE8q7JCu17vzxwpDNdnp1FKFB4cC73VXRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d5:c6:f5:ce:d5:9f:5b:62:a5:9e:88:92:85:df:cf:8d:39:ff:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Apr 17 09:39:42 2026 GMT Not After : Apr 18 10:12:42 2026 GMT Subject: CN=871F880C83E6E0B8E0F541DD09E17063FC6D4E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:46:fc:ca:19:e7:99:ad:48:43:ed:f5:2f: db:7f:f9:ff:9b:51:ed:94:8c:59:16:8c:8e:47:a3: c9:70:01:84:b9:d6:e1:d8:e7:0b:8f:77:bd:4d:aa: a8:8f:fc:da:bb:ec:68:33:f1:16:db:b5:43:66:47: 70:c5:21:11:47:dc:29:cf:e5:62:2f:0a:f0:67:48: 2b:78:de:8d:a6:6a:c9:7e:69:f4:bf:6e:bc:fc:2d: e4:26:5e:05:60:2b:7f:12:ee:dd:51:f6:4a:a0:c0: 0a:95:98:9c:72:2c:60:e0:8d:a7:db:ea:fc:94:d8: 1b:96:73:4c:1a:82:e5:8b:b8:3a:b4:45:36:1f:a8: 21:80:4f:82:f5:b2:ea:5f:18:10:5f:eb:6a:b6:47: 63:d6:34:08:42:a7:cc:19:90:fe:db:06:4c:a1:70: 05:9f:51:7d:16:df:2e:b7:e2:98:20:ad:32:07:b2: 99:f6:78:af:f1:ee:cf:e1:b9:9d:67:37:64:41:1d: f9:b1:2f:23:1d:ce:4c:43:65:b9:73:e7:19:45:c8: 60:d6:4b:f6:c2:17:20:77:15:8c:e3:e2:32:e3:7a: 96:e4:bc:02:da:f0:02:5f:6e:22:15:68:4b:81:68: 22:8e:88:30:42:9a:a2:4c:1a:1c:28:9c:34:ca:68: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1F:88:0C:83:E6:E0:B8:E0:F5:41:DD:09:E1:70:63:FC:6D:4E:2F X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9c:76:8a:c2:44:d6:6d:ed:a6:e4:95:2c:06:04:f4:da:6b: f3:09:e4:fe:4e:bd:e7:58:a3:4d:29:ce:e8:61:f8:19:7c:e5: e1:88:7d:d4:1a:cf:17:f0:05:9b:5f:f3:2b:32:3c:42:15:7f: 59:20:df:4a:c9:ff:58:df:11:57:81:95:b2:96:5a:e5:10:e0: 4a:5d:94:22:29:f0:b6:5c:ae:92:44:4e:17:70:61:a4:5c:f9: df:46:a3:92:d1:5b:20:3a:6c:1c:c6:8b:04:8c:14:80:90:23: 3b:47:70:87:cc:74:d1:44:c0:e5:4a:d2:95:e2:5f:4e:31:48: b0:60:7e:78:17:23:c2:70:dc:74:6b:cc:8c:67:47:17:6a:4e: 62:3e:d4:c8:a5:c2:19:b8:74:4c:10:b6:ce:10:17:cd:0b:c9: 60:22:f1:14:df:5b:cd:44:76:d1:75:0b:66:69:9d:13:31:4a: 10:76:06:54:15:b8:ea:d6:52:84:fe:bd:e4:9d:76:e8:98:7d: 25:62:36:d7:eb:11:31:7b:eb:5e:60:49:9c:72:7e:2c:ba:92: 7b:13:e9:19:b4:22:40:04:fc:86:f7:bd:79:a2:48:0f:d8:2f: 0d:62:b2:02:a9:5c:de:7e:8d:4f:ce:c5:f2:96:1d:a8:ee:36: 3a:70:5f:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUANXG9c7Vn1tipZ6IkoXfz405//0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjA0MTcwOTM5NDJaFw0yNjA0MTgxMDEyNDJaMDMxMTAvBgNV BAMTKDg3MUY4ODBDODNFNkUwQjhFMEY1NDFERDA5RTE3MDYzRkM2RDRFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsykb8yhnnma1IQ+31L9t/+f+b Ue2UjFkWjI5Ho8lwAYS51uHY5wuPd71NqqiP/Nq77Ggz8RbbtUNmR3DFIRFH3CnP 5WIvCvBnSCt43o2masl+afS/brz8LeQmXgVgK38S7t1R9kqgwAqVmJxyLGDgjafb 6vyU2BuWc0waguWLuDq0RTYfqCGAT4L1supfGBBf62q2R2PWNAhCp8wZkP7bBkyh cAWfUX0W3y634pggrTIHspn2eK/x7s/huZ1nN2RBHfmxLyMdzkxDZblz5xlFyGDW S/bCFyB3FYzj4jLjepbkvALa8AJfbiIVaEuBaCKOiDBCmqJMGhwonDTKaMtfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhx+IDIPm4Ljg9UHdCeFwY/xtTi8wHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZx2isJE1m3t puSVLAYE9Npr8wnk/k6951ijTSnO6GH4GXzl4Yh91BrPF/AFm1/zKzI8QhV/WSDf Ssn/WN8RV4GVspZa5RDgSl2UIinwtlyukkROF3BhpFz530ajktFbIDpsHMaLBIwU gJAjO0dwh8x00UTA5UrSleJfTjFIsGB+eBcjwnDcdGvMjGdHF2pOYj7UyKXCGbh0 TBC2zhAXzQvJYCLxFN9bzUR20XULZmmdEzFKEHYGVBW46tZShP695J126Jh9JWI2 1+sRMXvrXmBJnHJ+LLqSexPpGbQiQAT8hve9eaJID9gvDWKyAqlc3n6NT87F8pYd qO42OnBfYg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:49:15 2026 by rpki-client